What features does Survey Solutions provide to support data protection compliance (GDPR, HIPAA, etc.)? For example, does it include audit logs, data encryption, consent management, and tools for data subject access requests? And what compliance responsibilities fall on us when we manage our own server?
It is generally your responsibility to demonstrate that your organization is compliant with certain standards and requirements that may apply to your project. For example, here is a Google AI’s summary of HIPAA requirements:
You may need to speak with someone formulating these standards to determine exactly what “secure login credentials” are. Presence of password? Password of at least length #? Eye retina scan of the user? Or possibly something else.
Keep in mind however, that no system with 256-character long password is secure if you write that password on a yellow postit-note and stick it to your monitor.